By Topic

Security Event Management System based on Mobile Agent Technology

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$31 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

3 Author(s)
Wang Jingxin ; Nat. Univ. of Defense Technol., Changsha ; Wang Zhiying ; Daikui

Current information security prevention system has some disadvantages, such as the singleness of the data source, the imperfectness of the architecture and the absence of alert information post-processing. To address these, we present a framework for security event management based on mobile agent technology. In the framework, various agents are designed for different functions and roles, and these agents can communicate and collaborate securely. By virtue of the autonomy, mobility, inferential capability and social ability of the mobile agent, the numerous security events which may appear at many locations in the network can be efficiently detected, verified by the sensor agent and the verification agent. Furthermore, the correlation agent can correlate the purified security events globally based on the temporal relation, the causal relation, the spatial relation and statistics relations among them. We select Aglet as the platform and develop a security event management system (SEMS). Finally, through some multi-step attack scenarios, the effectiveness and the advantages of the mobile agent technology used for security event management have been verified.

Published in:

Intelligence and Security Informatics, 2007 IEEE

Date of Conference:

23-24 May 2007